Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3930303a3a2f34302d3430203d3e20323033343538.roa
File: 326131343a343438373a3930303a3a2f34302d3430203d3e20323033343538.roa (raw, json)
Hash identifier: mhENgsl82maPVlHscWchm+lD9x+YQvJHxHBR2vvczl0=
Subject key identifier: 12:4F:4E:16:4B:2D:4F:12:D1:7A:B6:97:DA:E9:A8:E5:F1:DB:A3:E8
Certificate issuer: /CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Certificate serial: 6A3D8E162A76D30E14F564FA130CBE3EC190C315
Authority key identifier: B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3930303a3a2f34302d3430203d3e20323033343538.roa
Signing time: Thu 11 Jan 2024 08:48:06 +0000
ROA not before: Thu 11 Jan 2024 08:43:06 +0000
ROA not after: Thu 09 Jan 2025 08:48:06 +0000
asID: 203458
IP address blocks: 2a14:4487:900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3d:8e:16:2a:76:d3:0e:14:f5:64:fa:13:0c:be:3e:c1:90:c3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96B8D4992D9B467CE859406542D783AE5B5427B
Validity
Not Before: Jan 11 08:43:06 2024 GMT
Not After : Jan 9 08:48:06 2025 GMT
Subject: CN=124F4E164B2D4F12D17AB697DAE9A8E5F1DBA3E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:a8:10:a5:35:43:38:ff:62:ff:85:a7:ee:
c9:01:79:51:43:09:dd:42:80:ca:49:ff:0c:3d:86:
9a:22:6d:3b:ed:e7:ed:d4:6c:6b:bc:85:23:42:74:
46:05:14:05:e1:d4:29:76:8f:6d:7a:19:18:f8:20:
62:da:78:7e:52:8f:3a:81:27:02:80:f2:41:6c:aa:
d7:b8:7b:9a:d1:37:ca:97:54:a6:74:5f:51:36:24:
da:60:5e:fe:4d:20:9c:64:7c:05:31:19:8a:c1:2f:
5b:b5:1a:44:7a:0e:cf:2b:e8:dd:cc:15:fb:65:9b:
c2:8e:41:8f:8a:f9:0f:ea:a6:c1:de:bc:b9:73:bc:
e9:04:2b:fe:8c:35:b0:f9:e7:c9:99:bd:70:bb:a6:
ea:e7:54:b4:0e:74:7e:e1:66:0a:aa:46:b2:94:fb:
e9:ed:7d:9a:8c:d4:30:7b:db:1c:3c:3e:b8:76:3f:
1a:18:f5:fd:70:73:2f:27:fd:72:29:34:9d:51:6c:
e0:8e:23:44:f2:4a:1a:cc:1f:bb:99:6f:7f:13:2a:
aa:8e:32:aa:fe:a4:24:a4:60:84:ae:c4:3d:6a:98:
17:b7:aa:f7:16:f5:12:8b:cf:8c:a2:fe:c9:3a:4f:
fb:e0:9a:a6:fa:de:24:b4:bf:aa:51:0c:f7:97:0d:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:4E:16:4B:2D:4F:12:D1:7A:B6:97:DA:E9:A8:E5:F1:DB:A3:E8
X509v3 Authority Key Identifier:
keyid:B9:6B:8D:49:92:D9:B4:67:CE:85:94:06:54:2D:78:3A:E5:B5:42:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/B96B8D4992D9B467CE859406542D783AE5B5427B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B96B8D4992D9B467CE859406542D783AE5B5427B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/18/326131343a343438373a3930303a3a2f34302d3430203d3e20323033343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4487:900::/40
Signature Algorithm: sha256WithRSAEncryption
ad:c0:86:50:bd:a5:65:8e:14:10:58:98:96:8a:1b:90:fb:0a:
cb:46:e2:a6:e3:c6:80:ad:71:32:ea:79:e1:59:19:8d:98:65:
7a:c2:f1:d3:5d:78:a1:64:75:31:35:62:d9:20:75:8a:b6:98:
1a:4e:13:0e:9a:8e:d7:a1:fe:a4:9e:47:f9:08:9a:09:42:2a:
37:6d:07:e1:e0:3f:af:d1:db:87:af:19:20:03:e3:24:e1:35:
18:c4:69:97:d4:4f:d9:9e:60:29:cb:00:5f:8b:50:a2:3e:8c:
f3:9e:6a:ae:5d:09:e2:18:c3:bf:72:5c:6a:09:d0:b9:8a:0f:
81:24:0e:4c:f6:03:69:f2:6f:5a:8b:42:5f:97:aa:c0:92:24:
9c:c4:5a:8a:ff:8d:b3:57:f0:55:d5:ea:41:4f:de:a7:b2:20:
37:26:b5:70:ef:04:0b:27:48:50:63:38:ea:2e:9d:9e:87:e8:
91:10:35:fd:09:37:cb:23:62:cc:28:08:d0:d3:85:3f:af:f5:
dd:64:5c:0f:78:90:c6:bf:31:f7:fc:ce:52:db:c5:23:47:15:
5c:6b:b9:c6:f8:ce:cb:d1:bb:c6:09:9f:61:60:19:26:93:ca:
ed:94:eb:5c:64:10:46:ac:d6:35:d2:99:c5:3e:93:b5:55:37:
aa:ca:56:0b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUaj2OFip20w4U9WT6Ewy+PsGQwxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2QjhENDk5MkQ5QjQ2N0NFODU5NDA2NTQyRDc4M0FF
NUI1NDI3QjAeFw0yNDAxMTEwODQzMDZaFw0yNTAxMDkwODQ4MDZaMDMxMTAvBgNV
BAMTKDEyNEY0RTE2NEIyRDRGMTJEMTdBQjY5N0RBRTlBOEU1RjFEQkEzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJsagQpTVDOP9i/4Wn7skBeVFD
Cd1CgMpJ/ww9hpoibTvt5+3UbGu8hSNCdEYFFAXh1Cl2j216GRj4IGLaeH5SjzqB
JwKA8kFsqte4e5rRN8qXVKZ0X1E2JNpgXv5NIJxkfAUxGYrBL1u1GkR6Ds8r6N3M
Fftlm8KOQY+K+Q/qpsHevLlzvOkEK/6MNbD558mZvXC7purnVLQOdH7hZgqqRrKU
++ntfZqM1DB72xw8Prh2PxoY9f1wcy8n/XIpNJ1RbOCOI0TyShrMH7uZb38TKqqO
Mqr+pCSkYISuxD1qmBe3qvcW9RKLz4yi/sk6T/vgmqb63iS0v6pRDPeXDeM5AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUEk9OFkstTxLReraX2umo5fHbo+gwHwYDVR0j
BBgwFoAUuWuNSZLZtGfOhZQGVC14OuW1QnswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xOC9COTZCOEQ0OTkyRDlCNDY3Q0U4NTk0MDY1NDJENzgzQUU1QjU0MjdC
LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA0MDMyYzhmLTFkNTct
NGMzYi05MDQzLWEwZTdmZWJmMTY3ZC8wL0I5NkI4RDQ5OTJEOUI0NjdDRTg1OTQw
NjU0MkQ3ODNBRTVCNTQyN0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCBowYIKwYB
BQUHMAuGgZZyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIxYmMxMi8xOC8zMjYx
MzEzNDNhMzQzNDM4MzczYTM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMy
MzAzMzM0MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwDgQCAAIwCAMGACoURIcJMA0GCSqGSIb3DQEBCwUAA4IBAQCt
wIZQvaVljhQQWJiWihuQ+wrLRuKm48aArXEy6nnhWRmNmGV6wvHTXXihZHUxNWLZ
IHWKtpgaThMOmo7Xof6knkf5CJoJQio3bQfh4D+v0duHrxkgA+Mk4TUYxGmX1E/Z
nmApywBfi1CiPozznmquXQniGMO/clxqCdC5ig+BJA5M9gNp8m9ai0Jfl6rAkiSc
xFqK/42zV/BV1epBT96nsiA3JrVw7wQLJ0hQYzjqLp2eh+iREDX9CTfLI2LMKAjQ
04U/r/XdZFwPeJDGvzH3/M5S28UjRxVca7nG+M7L0bvGCZ9hYBkmk8rtlOtcZBBG
rNY10pnFPpO1VTeqylYL
-----END CERTIFICATE-----
Generated at Thu Mar 14 17:54:47 2024 by rpki-client on console-ams.rpki-client.org